Korea’s Social Media Lawsuits: Deepfakes, Meta Fine, and PIPA

Social media lawsuits in South Korea run on a different engine than those in most democracies: the majority are criminal prosecutions rather than civil suits, truth is not a complete defense, and the targets range from anonymous commenters to Meta and Google. The main vehicles are criminal defamation complaints under the Criminal Act and the Network Act, entertainment-agency suits against online harassers, deepfake sex-crime prosecutions, and regulatory enforcement by the Personal Information Protection Commission and the Korea Fair Trade Commission. A sweeping December 2025 revision of the Network Act, taking effect in July 2026, adds punitive damages of up to five times proven losses and administrative fines on platforms of up to 1 billion won.

Why Most Social Media Cases Are Criminal, Not Civil

South Korea criminalizes online defamation, and that choice shapes nearly everything else. Article 307 of the Criminal Act punishes publicly alleging facts about a person with up to two years in prison or a fine of up to 5 million won; if the facts are false, the ceiling rises to five years or 10 million won. Article 311 separately criminalizes public insults, carrying up to one year.1Future Free Speech. South Korea

The Network Act stacks heavier penalties on top when the speech happens online. Disclosing true but defamatory facts through an online platform exposes a poster to up to three years in prison or a fine of up to 30 million won. If the facts are false, the maximum rises to seven years and 50 million won.2The Korean Law Blog. Defamation Is a Criminal Offense

Truth is not an absolute defense. A defendant can escape liability only by proving the statement was made “solely for the public interest,” a burden that falls on the person who spoke.3ARTICLE 19. South Korea: Repressive Criminal Defamation Provisions Threaten Freedom of Expression That structure pushes nearly all defamation disputes into criminal court rather than civil court, an arrangement unusual among developed democracies.4VOA News. Under Yoon, South Korea Defamation Cases Against Media Rise

The volume is substantial. Roughly 30,000 defamation accusations are filed in South Korea each year.5Open Net Korea. Open Net Korea Report In 2013, more than 11,500 people were indicted for defamation or insult, with another 1,233 indicted specifically for online defamation; most received fines, but 111 were incarcerated. Between January 2005 and August 2007, South Korea accounted for roughly 30% of the world’s defamation incarcerations.6Open Net Korea. Open Net Korea Prosecution Data

Practically, this means a “lawsuit” over a social media post in South Korea usually begins with a criminal complaint filed with police or prosecutors, not a civil summons. Civil damages claims typically follow or accompany the criminal case.

K-Pop Agencies Suing Anonymous Commenters

Entertainment agencies have become some of the most active plaintiffs. After the 2019 deaths of K-pop stars Sulli and Goo Hara, both of whom had faced years of online abuse, agencies shifted toward routinely filing criminal complaints and civil suits against commenters.7Social Science Journal. Cyberbullying in South Korea A proposed “Sulli’s Law” requiring real-name verification on major portals stalled, in part because the Constitutional Court had struck down an earlier real-name system in 2012 as an excessive restriction on anonymous expression.8Open Net Korea. Korean Real-Name Law Decision

With no legislative shortcut, agencies turned to the courts. In 2024, Starship Entertainment sued the YouTube channel “Sojang” over defamatory content targeting celebrities including Jang Wonyoung of Ive, pursuing cooperation from Google’s headquarters to unmask the account.9Korea Herald. K-Pop Agencies Take Legal Action Against Online Harassment In March 2024, NewJeans filed a request in a California federal court to compel Google to disclose the identity of a YouTube user whose account had posted dozens of defamatory videos with over 13 million combined views, with the goal of then suing in South Korea where criminal defamation applies.10The New York Times. NewJeans K-Pop YouTube Defamation Lawsuit

By early 2026, SM Entertainment had identified X accounts spreading malicious comments and confirmed filing criminal complaints. Hybe and its subsidiary Belift Lab reported tracing overseas IP addresses to pursue cross-border proceedings against a foreign-based poster.9Korea Herald. K-Pop Agencies Take Legal Action Against Online Harassment

A 2025 ruling pushed defamation protection into new territory. The agency Vlast sued a social media user who had posted derogatory remarks about the virtual K-pop group Plave. The defendant argued that insults aimed at virtual avatars could not amount to defamation. The court disagreed, ruling that when an avatar is widely recognized as representing a real person, attacks on the character extend to the individual behind it. The court awarded 500,000 won (about $360) in damages, and Vlast appealed the amount.11BBC News. Court Rules Defamation of Virtual K-Pop Characters Extends to Real Individuals

Agencies describe these suits as damage control. Platforms based outside South Korea run their own review before releasing user data, which can take weeks or months, and the harmful content circulates long before any legal response.9Korea Herald. K-Pop Agencies Take Legal Action Against Online Harassment

Deepfake Pornography Prosecutions

A separate wave of social media–related cases involves sexually explicit deepfakes, much of it circulated through Telegram. Police handled more than 800 deepfake sex crime cases between January and September 2024, compared with 156 in all of 2021.12CNN. South Korea Deepfake Bill Passed Most victims and perpetrators were teenagers.13East Asia Forum. South Korea Confronts a Deepfake Crisis

On September 26, 2024, the National Assembly amended the Act on Special Cases Concerning the Punishment of Sexual Crimes. The revised law raised the maximum sentence for producing and distributing deepfake pornographic material from five years to seven, introduced a mandatory minimum of three years for creating such material for dissemination, and for the first time criminalized mere possession or viewing of sexually explicit deepfakes, with penalties of up to three years in prison or a 30 million won fine.13East Asia Forum. South Korea Confronts a Deepfake Crisis

Between November 2024 and October 2025, police apprehended 3,557 individuals for cybersexual violence. In one case, a 15-year-old was identified as the operator of three Telegram channels distributing 590 deepfake videos of female celebrities; in another, four teenagers were arrested for using fabricated deepfake videos to blackmail victims into producing explicit material.14Asian News Network. Cheap AI Tools Fuel Teen-Driven Rise in Deepfake Sex Crimes in South Korea In October 2024, a South Korean court imposed a 10-year sentence on a perpetrator for deepfake crimes distributed via Telegram.15Business & Human Rights Resource Centre. South Korea Police Announce Arrests in Deepfake Sex Crime Busts Indictment rates remain a point of criticism; in 2021, only 28% of those caught for digital sex offenses were formally indicted.13East Asia Forum. South Korea Confronts a Deepfake Crisis

Regulatory Cases Against Platforms

Beyond prosecutions of individual users, Korean regulators have pursued major actions against platforms themselves.

Meta’s 21.6 Billion Won Privacy Penalty

In November 2024, the Personal Information Protection Commission imposed a combined penalty surcharge and administrative fine of 21.6 billion won (about $15 million) on Meta Platforms. The PIPC found Meta had collected sensitive data from roughly 980,000 Korean users, including information about religious and political beliefs, same-sex marital status, and transgender status, without obtaining the separate consent required under the Personal Information Protection Act. Meta used that data to build advertising topics for about 4,000 advertisers. The commission also cited Meta for rejecting user access requests without legitimate justification and for failing to maintain adequate security on inactive account recovery pages, which hackers exploited.16PIPC. PIPC Enforcement Action Against Meta

Google’s YouTube Music Consent Decree

In December 2025, the Korea Fair Trade Commission resolved an investigation into Google for tying YouTube Music to YouTube Premium. Between June 2018 and August 2025, YouTube Music’s market share in South Korea grew from about 6% to 38%, while the previous market leader Melon fell from roughly 60% to 23%. Rather than imposing a formal fine, the KFTC accepted a consent decree under which Google agreed to launch a cheaper “Premium Lite” option, freeze Premium pricing for one year, and contribute 30 billion won to a fund supporting the Korean music industry.17Wolters Kluwer. Main Developments in Competition Law and Policy – Korea

The December 2025 Network Act Overhaul

The most significant change to the litigation environment is the Network Act revision passed on December 24, 2025, which takes effect in July 2026.18CCIA. Key Issues with Korea’s Amended Network Act

The amendments target “disinformation,” defined as information that is wholly or partly false, or altered in a way that could be mistaken for fact, when disseminated with the intent to harm others or obtain unjust profit and when it infringes personality rights, property rights, or the public interest. Satire and parody are explicitly excluded.19Kim & Chang. Amendments to Korea’s Network Act Civic groups including the People’s Solidarity for Participatory Democracy have called the law an “online gag law.”20Donga Ilbo. Revised Information and Communications Network Act

For large-scale platform operators (with size thresholds to be set by presidential decree before July 2026), the new obligations include:

The ruling Democratic Party cited the European Union’s Digital Services Act as its model.18CCIA. Key Issues with Korea’s Amended Network Act Experts have warned that the ambiguity of the criteria for identifying “false or manipulated” content is likely to generate protracted litigation and could enable strategic suits aimed at suppressing unfavorable coverage.20Donga Ilbo. Revised Information and Communications Network Act

Revenue-Based Fines Under the New PIPA

Separately, the National Assembly passed amendments to the Personal Information Protection Act on February 12, 2026. The revised law authorizes administrative fines of up to 10% of a company’s total revenue for severe data breaches. The maximum applies in cases of intentional or grossly negligent conduct repeated within three years, conduct affecting 10 million or more individuals, or failure to comply with a corrective order from the Personal Information Protection Commission.16PIPC. PIPC Enforcement Action Against Meta The amendments take effect six months after enactment and followed a series of large-scale data breaches across the telecommunications, platform, and financial sectors.

For anyone operating on, suing over, or defending against conduct on social media in South Korea, the combined effect is a system where a single post can trigger a criminal complaint, a civil damages claim, a cross-border discovery action, and, after July 2026, platform-level exposure measured in billions of won.